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CLAIMS: 

1. A method for processing network management data received by a network 
management system during the monitoring of a network, the method comprising: 

5 receiving network management data, and detenriining if the network management 
data indicates the resolution of a previous event generated by the network 
management system in response to previously received network management data. 

2. A method as claimed in claim 1, wherein, if the network management data 
10 indicates the resolution of a previous event, the method further comprises marking the 

previous event as resolved. 

3. A method as claimed in claim 1, wherein the network management data is 
processed in response to the network management system receiving network 

1 5 management data from the network. 

4. A method as claimed in claim 1, the network management data comprising 
values of a monitored characteristic of a part of the network for which an event is 
generated if the monitored value exceeds a predetermined threshold, wherein an event 

20 list includes an unresolved previous event for the monitored characteristic, wherein 
the step of receiving network management data comprises receiving a value for the 
monitored characteristic, and the step of determining comprises considering whether 
the monitored value has been below the predetermined threshold for a preceding time 
period, and if so determining that the received value indicates the resolution of the 

25 unresolved previous event. 

5. A method as claimed in claim 4, wherein the step of considering comprises, in 
response to receiving the network management data, comparing a first received value 
for the monitored characteristic with the predefined threshold, and if the value is 

30 below the predefined threshold, starting a timer, the timer expiring at the end a 
predefined time period. 
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6. A method as claimed in claim 5, wherein the step of considering further 
comprises comparing each subsequent received value for the monitored characteristic 
with the predefined threshold, and if any value exceeds the threshold cancelling the 
timer. 

5 

7. A method as claimed in claim 5, wherein, when the timer expires, determining 
that the monitored value has been below the predetermined threshold for the 
preceding time period. 

10 8. A method for processing data representing a monitored characteristic of a part 
of the network in a network management system, the method comprising: periodically 
receiving a value for the monitored characteristic; if a received value exceeds a 
predetermined threshold for the monitored characteristic generating an event; and 
thereafter, periodically considering whether the monitored value has been below the 

15 predetermined threshold for a preceding time period, and if so determining that the 
event is resolved. 

9 A method as claimed in claim 8, wherein the preceding time period is an 
immediately preceding predetermined time period, and the step of periodically 
20 considering comprises considering whether the monitored value has been below the 
predetermined threshold for the immediately preceding time period in response to 
each subsequently received value. 

10. A method as claimed in claim 8, wherein if the step of considering determines 
25 that the event is resolved, the method further comprises marking the event as 

resolved. 

11. A method as claimed in claim 1, the network management data relating to an 
asynchronous Trap being received by the network management system, wherein the 

30 step of determining comprises considering if the Trap indicates the possible resolution 
of an event in an event log. 
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12. A method as claimed in claim 11, wherein if the Trap indicates the possible 
resolution of an event in an event log, the step of determining further comprises 
considering whether the event log includes a previously received event that is 
resolved by the Trap. 

5 

13. A method for processing data received in an asynchronous Trap by a network 
management system, the method comprising: receiving a Trap from the network; 
considering if the Trap indicates the possible resolution of a event in an event log, and 
if so considering whether the event log includes a previously received event that is 

1 0 resolved by the Trap. 

14. A method as claimed in claim 1, wherein the method processes network 
management data previously received by the network management system and stored 
in memory. 

15 

15. A method as claimed in claim 14, wherein the step of receiving network 
management data comprises receiving event data relating to an event stored in 
memory, in response to a scan of previously generated events stored and included in 
an event log. 

20 

16. A method as claimed in claim 15, wherein the event data relates to a recurring 
event and includes the time of the last occurrence of the event. 

17. A method as claimed in claim 16, wherein the step of determining comprises 
25 comparing the present time with the time of the last occurrence of the event, and, if 

the time difference is greater than a predetermined time interval, determining that the 
event is resolved. 

18. A method as claimed in claim 17, wherein if the step of determining 
30 determines that the event is resolved, the method further comprises marking the 

recurring event as resolved. 
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19. A method for processing event data generated by a network management 
system during the monitoring of a network, the method processing event data relating 
to events previously generated by the network management system a plurality of 
times and which may be entered in the event log as a recurring event, the method 

5 comprising identifying an event to be processed from the event list; and considering 
whether the condition which caused the event to be generated has occurred in a 
preceding time period. 

20. A method as claimed in claim 19, wherein, if the step of considering 
10 determines that the condition which caused the event to be generated has not occurred 

in the preceding time period, detenriining the event to be resolved. 

21 . A method as claimed in claim 20, further comprising marking the event in the 
event list as resolved. 

15 

22. A computer readable medium including a computer program for processing 
network management data received by a network management system during the 
monitoring of a network; the program comprising a program step for receiving 
network management data and for determining if the network management data 

20 indicates the resolution of a previous event generated by the network management 
system in response to previously received network management data. 

23. A network management system for processing network management data 
received during the monitoring of a network, the system comprising: a processor for 

25 receiving network management data and determining if the network management data 
indicates the resolution of a previous event generated by the network management 
system in response to previously received network management data. 

24. A network management system as claimed in claim 23, further comprising 
30 memory for storing data relating to events generated by the system, wherein if the 

processor determines that received network management data indicates the resolution 
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of a previous event stored in the memory, the processor updates the memory to mark 
the previous event as resolved. 

25. A network management system as claimed in claim 24, further comprising 
means for presenting an event list of generated events to a user. 



